לוח משרות דרושים חוקר סייבר, לחיפוש זה נמצאו 155 משרות

Were looking for a Pentest Product Associate to join our Product team and help expand the power of our company. In this pivotal role, you will be the primary operator of our cutting-edge AI-driven Dynamic Application Security Testing (DAST) agent while simultaneously innovating detection mechanisms for cloud-native technologies. You will bridge the gap between automated AI testing and cloud infrastructure, defining the "rules of engagement" for our agents to ensure they effectively simulate sophisticated attacks and accurately classify the modern attack surface.
Responsibilities
Develop advanced detection algorithms to classify cloud technologies while fine-tuning the attack policies that define how our agents identify and exploit vulnerabilities.
Analyze cloud services, APIs, and log payloads to review complex attack paths, reducing false positives and ensuring compliance with industry standards.
Stay at the forefront of novel attack vectors and emerging cloud/API threats, translating new techniques into executable behaviors for the company DAST engine.
Collaborate directly with Research, Backend, and R&D teams to turn operational insights into feature requests, positioning our company as the market leader in vulnerability management.

We're looking for a Threat Detection Researcher to join the Threat Research team and spread the power of our company. In this role, you will further develop the Cloud-native Threat Detection domain.
Check out some of our recent research:
Detecting Malicious OAuth Applications
Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild
our company Discovers Cloud Email Abuse Campaign
Responsibilities
Drive the full lifecycle of security detections - from threat research and data analysis to building and shipping detection logic directly into production.
Design behavioral baselines for complex cloud environments using diverse signals, and develop high-fidelity detections based on those baselines.
Expand our company's detection engine with novel and high-impact telemetry sources, pushing the boundaries of what can be detected in modern cloud environments.
Conduct deep technical research into complex cloud services to uncover novel attack vectors.
Investigate real-world attacks across cloud environments, identity providers (IDPs), and infrastructure-as-a-service (IaaS) platforms.
Hunt and analyze emerging threats and active campaigns targeting the cloud ecosystem.

Were looking for a top-notch Threat Detection Researcher to join our team and spread the power of our company. In this role, you will further develop the company Runtime Sensor as part of our threat research team.
Responsibilities
Develop detections and tools to protect customers from cloud threats.
Investigate attacks on cloud environments and malware targeting cloud and AI workloads.
Hunt and analyze real-world attacks and emerging cloud and AI threats.
Collaborate closely with the R&D team to transform research insights into product features.
Work with customers in response to requests related to suspicious activity or potential incidents.
Create best practices and security policies based on research findings.
Deliver external-facing content (blog posts and talks at security conferences) based on security insights and novel research.

Come join the organization that is redefining security for the AI era. As one of the fastest-growing startups ever, we enable teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. Trusted by security teams all over the world, we have a proven track record of success and a culture that values world-class talent. Not to mention, we're now powered by Google, meaning we offer our customers an AI-powered platform that harnesses Googles Threat Intelligence and Security Operations to better detect, prevent, and respond to threats across all environments, allowing for further innovation.
Our Wizards from all over the globe work together to protect the infrastructure of our customers, including over 65% of the Fortune 100, who trust us to scan and secure over 230 billion files daily. Were honored to be a leading player in a massive and growing market, and we continue to look for exceptional Wizards who are eager to make a significant impact on our team. At our company, youll have the freedom to think creatively, dream big, and use your full range of skills to contribute to our momentous growth. Come join our team and help us create secure cloud environments that allow even the best companies to move faster, all while having some fun!

We are seeking an AI Security Researcher to join Dashs core research team. Youll investigate how AI agents - spanning coding agents, SaaS AI platforms, cloud, and endpoints - can be abused, and design detections that stop threats before they cause impact. Each platform is different, yet they share common risk patterns across prompts, tools, MCP servers, skills, hooks, identity, and data movement. Your mission is to master both: uncovering unique attack surfaces while building universal, session- and intent-aware defenses. This role combines deep platform research, responsible security testing, and close collaboration with engineering to translate findings into production runtime protection. You will help define the field of Agentic Security.

Responsibilities

Research agentic threats: Prompt injection, tool/plugin/MCP abuse, skill and hook misuse, rogue autonomy, identity misuse, data leakage, adversarial AI, and protocol exploitation across coding agents and enterprise AI platforms.

Develop runtime detections: Design detections for multiple environments (coding agents, SaaS AI, cloud, endpoints), leveraging platform hooks, APIs, telemetry, and native guardrails where available.

Analyze platform complexities: Deep-dive into architectures, permissions, workflows, and agent capabilities (MCP servers, Skills, plugins, extensions) while extracting cross-platform risk patterns.

Build scalable detection logic: Prototype and refine heuristics, signatures, and intent-aware detectors that hold up at enterprise scale with low friction for builders.

Investigate monitoring and enforcement boundaries: Push what platforms allow for visibility and control - hooks, plugins, configuration surfaces, inventory signals, and policy enforcement points.

Prototype PoCs: Validate attack paths end to end, then turn findings into production-ready signatures, heuristics, detectors, and runtime policies.

Collaborate with engineering: Embed research into Dashs detection pipelines, session-aware runtime protection, and policy/governance modules.

Stay ahead of the field: Track adversarial AI and agent security research, continuously evolving Dashs detection and enforcement coverage.

We're looking for an experienced Security Researcher to join our core team and deep dive into CVEs, conducting cutting-edge vulnerability research that directly powers our company's revolutionary approach to eliminating container vulnerabilities at the source.
Responsibilities:
Conduct deep-dive research into CVEs and vulnerabilities, analyzing root causes and attack vectors to inform our AI-powered prevention platform
Perform reverse engineering analysis using tools like IDA Pro, Ghidra, or similar platforms to understand complex security vulnerabilities and exploitation techniques
Research and analyze complex low-level system mechanisms including kernel vulnerabilities, network security issues, and operating system weaknesses
Think outside the box, challenge existing assumptions, and create innovative approaches to vulnerability research and prevention
Work in a unique environment where your research insights are rapidly implemented into our product, creating direct real-world impact from your vulnerability research
Contribute to our company's technical knowledge base and help establish new methodologies for proactive vulnerability identification and mitigation.

We're looking for an experienced Application Security Researcher to help customers maximize the value of our AI-powered offensive security platform.

In this role, you'll work hands-on with customer environments, validate security findings, investigate complex application vulnerabilities, and help organizations understand, reproduce, and remediate the risks identified by our platform.

You'll collaborate closely with customers, Product, Engineering, AI Research, and Customer Success teams, providing valuable feedback that continuously improves the platform while serving as a trusted technical advisor throughout the customer journey, from complex deployments to production investigations.

This is an ideal role for someone with a strong offensive security background who enjoys combining technical research with customer interaction and wants to help shape the future of AI-driven application security.

Responsibilities
Validate vulnerabilities discovered by our AI platform and provide clear technical evidence of successful exploitation.
Perform hands-on testing of modern web applications and APIs to verify findings and identify additional attack paths.
Analyze complex application security issues, including authentication, authorization, business logic flaws, and API vulnerabilities.
Help customers understand security findings, reproduce vulnerabilities, assess risk, and implement remediation recommendations.
Investigate cases where the platform missed, misclassified, or incorrectly assessed vulnerabilities and provide actionable feedback to Product and Engineering teams.
Collaborate closely with AI Research and Engineering teams to improve detection accuracy, attack coverage, and platform capabilities.
Develop new attack methodologies and validation techniques for modern web applications.
Stay current on emerging application security trends, offensive techniques, and modern attack methodologies.
Support customers during complex deployments, integrations, and production troubleshooting, including BYOM deployments and connectivity to internal applications.

Our mission is to protect every mobile app in the world and the people who use them. We are the leader in AI-native mobile business protection, providing cyber and fraud teams with an agentic platform that builds, monitors, and maintains security defenses in Android and IOS apps - with no SDKs, no coding, and no disruption to engineering cycles.
Our platform delivers over 400 security, anti-fraud, anti-bot, and API protection capabilities, powered by deep learning models trained on a decade of mobile defense data and trillions of live threat events. From build time to runtime, our AI Agents help mobile brands detect, investigate, and respond to threats faster than ever - recognized as the best AI Platform for Cyber Resilience at RSA Conference 2026 for the second consecutive year. Leading financial, healthcare, m-commerce, and B2B brands rely on Appdome to secure over 50,000 mobile apps and protect more than 1 billion end users globally.
An Equal Opportunity Employer. We are committed to diversity, equity, and inclusion in our workplace. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by law. All qualified applicants will receive consideration for employment without regard to any of these characteristics.
About the Role We are looking for a talented, passionate Offensive Researcher to join our innovative research team. If youre eager to explore cutting-edge mobile security techniques and help safeguard the mobile app ecosystem, this is the role for you! As a key player in our security team, you'll design and execute sophisticated attack simulations on the platform. Your work will touch on diverse attack vectors, including file systems, networks, jailbreaks, memory injections, and more.

we are looking for a Principal Security Researcher.
We're looking for a Principal Security Researcher, based in Israel, to bring deep offensive security expertise, autonomy, and a relentless attacker mindset to help drive lasting security improvements at scale.
What You'll Actually Be Doing:
Lead advanced penetration testing, red team operations, or security research against cloud infrastructure, applications, and services, uncovering vulnerabilities that matter most
Build custom tools, exploits, and attack techniques that simulate real-world adversaries and raise the bar for our offensive security tradecraft
Partner with product teams to translate offensive findings into remediation and stronger secure design practices
Mentor team members and present findings to technical and executive audiences, growing the team's overall offensive security capability
JR360843

we are looking for a Threat Intelligence Researcher to join its Threat Intelligence Group and support the companys Cyber Threat Intelligence Exposure Management (CTIEM) services, Incident Response engagement and proactive services. In this position, you will identify, investigate, and monitor external cyber threats and organizational exposures across the open web, dark web, social media platforms, and other intelligence sources. You will help organizations understand and reduce their external attack surface, detect brand abuse and malicious activity targeting their assets, and develop innovative intelligence-driven monitoring capabilities leveraging automation and AI technologies.
The successful candidate should be a creative, highly motivated, and independent researcher with strong analytical skills, a deep understanding of attacker methodologies, and a passion for solving complex intelligence challenges. As part of the role, you will engage with clients, support operational teams, and contribute to the development of cutting-edge CTIEM capabilities.
Main Responsibilities:
Conduct proactive monitoring and investigations across the open web, dark web, forums, marketplaces, messaging platforms, and social media channels to identify threats targeting client organizations.
Analyze organizational exposure across external attack surfaces, including internet-facing assets, leaked information, exposed services, and emerging risks.
Investigate and identify brand abuse activities, impersonation attempts, phishing campaigns, fraudulent domains, and other malicious activities targeting clients.
Detect and assess data exposures and information leaks through a variety of intelligence sources, commercial platforms, and proprietary tools.
Utilize Attack Surface Management (ASM) platforms and related technologies to identify, prioritize, and assess external security exposures.
Develop and enhance intelligence collection, detection, and monitoring capabilities through automation and AI-driven solutions, primarily using Python.
Produce comprehensive intelligence reports, exposure assessments, and actionable recommendations for clients and internal stakeholders.
Engage directly with clients to present findings, explain risks, and support remediation efforts.
Collaborate closely with Incident Response teams to support ongoing investigations.

We are seeking a Senior Application Security Engineer with profound expertise in application security. In this role, you will execute fundamental AppSec tasks, including threat modeling, secure design reviews, code evaluation, and vulnerability management, leveraging both manual methods and advanced AI tooling. You will also help secure the AI systems Unity itself is building, including agentic tools and AI-assisted development workflows.

You will work directly with engineering teams across the US and EMEA.

What you will do
Lead threat modeling, secure design reviews, and penetration testing for Unity products and services, from the engine and editor to cloud services, APIs, and internal platforms.

Perform deep code review and manual testing on high-risk systems, using AI-assisted review processes and covering areas automated tooling cannot fully reach.

Build and operate security automation. Use and extend AI-assisted tooling for continuous code review, finding triage, and automated penetration testing, and step in where human judgment is required.

Secure AI and agentic systems. Assess AI-native products, LLM integrations, and agent workflows for the risks specific to them.

Partner with engineering teams to drive remediation, turning recurring findings into guardrails, secure defaults, and paved paths.

Investigate and respond to application security incidents, including root cause analysis and durable corrective action.

Contribute to secure development lifecycle and to compliance work.

At Alice, our Cyber Threat Intelligence group thrives on curiosity and deep technical dive capabilities. We are looking for a Senior Threat Intelligence Researcher with a passion for CTI and a background in proxy research/ anti-bot defense/ web-scraping /threat hunting, with a proven ability to take initiative and conduct independent research with a track record of high-level results. In other words, not just an individual contributor, but a true talent that is seeking to make a mark in the industry. You will lead technical threat research, author analytical reports, and proactively monitor ongoing and emerging threats to keep us steps ahead of adversaries. Responsibilities
* Hunting, detecting, monitoring, and researching threats against Alice clients.
* Analysis of threat groups and TTPs across different fraudulent ecosystems.
* Researching and monitoring multiple sources through the clear, deep, and the dark web.
* Produce technical reports for clients describing threat actor TTPs, analysis and exploits relevant for Alice’s clients. Work closely with client account leads and stakeholders, as well as collaborating with fellow analysts to produce intelligence reports.
* Review, enrich and provide analyst tradecraft for other team members as part of the delivery process. Prepare assessments of current threats and trends based on collection, research and analysis of classified intelligence collected by the teams.

About Alice:
Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

At Alice, our Cyber Threat Intelligence group thrives on curiosity and deep technical dive capabilities. We are looking for a Senior Threat Intelligence Researcher with a passion for CTI and a background in proxy research/ anti-bot defense/ web-scraping /threat hunting, with a proven ability to take initiative and conduct independent research with a track record of high-level results. In other words, not just an individual contributor, but a true talent that is seeking to make a mark in the industry. You will lead technical threat research, author analytical reports, and proactively monitor ongoing and emerging threats to keep us steps ahead of adversaries. Responsibilities
* Hunting, detecting, monitoring, and researching threats against Alice clients.
* Analysis of threat groups and TTPs across different fraudulent ecosystems.
* Researching and monitoring multiple sources through the clear, deep, and the dark web.
* Produce technical reports for clients describing threat actor TTPs, analysis and exploits relevant for Alice’s clients. Work closely with client account leads and stakeholders, as well as collaborating with fellow analysts to produce intelligence reports.
* Review, enrich and provide analyst tradecraft for other team members as part of the delivery process. Prepare assessments of current threats and trends based on collection, research and analysis of classified intelligence collected by the teams.

About Alice:
Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

Were seeking a Senior Security Researcher to drive end-to-end research initiatives that strengthen our detection capabilities. In this role, youll investigate emerging attack surfaces, craft and implement innovative detection logic, and test your findings in real-world environments. Its a hands-on position ideal for someone eager to transform research insights into effective, production-grade security defenses.


Responsibilities
Research AI Agent and LLM-related risks, such as prompt injection and jailbreaking and implement sophisticated detection strategies.
Conduct research on cloud, web, and API security to uncover new threats and attack vectors.
Develop, refine, and design world-class detection logic and rules to enhance our runtime protection.
Perform threat-hunting activities across large data sources to identify emerging attack patterns
Drive full-cycle research: from hypothesis and experimentation to production validation.
Collaborate with engineering and product teams to deliver actionable insights.

Responsibilities:
Take an ambiguous security challenge from "this might be possible" to a working POC that proves the company`s approach, grounded in technical reality.
Research the customer need, cybersecurity gap, and technical feasibility behind an idea before and while you build.
Own the end-to-end execution loop: scope the problem, build the prototype, evaluate it, document the approach, and ship it.
Partner closely with Product, R&D, and GTM. Dont just write about emerging problems. POC the solutions so customers see something real.
Make the calls on architecture, tooling, and tradeoffs, moving quickly from ambiguity to a tangible prototype.
When a POC succeeds, lead the transition to Engineering and Product so it can receive the resources required for productization.
Stay ahead of the rapid evolution in AI and proactively bring relevant insights into the team.